CVE-2026-101962

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specifically malformed BGP EVPN multicast update which is attempted to be readvertised to cause an rpd crash.

Score

CVSS 4.0 8.7 High

Status

Awaiting Analysis - sirt@juniper.net

Published

2026-10-14

Last modified

2026-10-15

Weaknesses

CWE-130

Affected products

• Junos Os (Juniper Networks)
• Junos Os Evolved (Juniper Networks)

References

• https://supportportal.juniper.net/JSA112187